$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft File: tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft (raw, json) Hash identifier: WmO+rcS0esg5h6ZhU/rJGtl9I8i/2Q+E2NpPvTh7ZBk= Subject key identifier: E0:5C:58:A0:EC:43:33:69:54:52:FF:3C:37:25:3A:35:C7:FB:08:12 Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD Certificate issuer: /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft Manifest number: 0392 Signing time: Sat 23 Aug 2025 02:03:14 +0000 Manifest this update: Sat 23 Aug 2025 02:03:14 +0000 Manifest next update: Sat 30 Aug 2025 02:03:14 +0000 Files and hashes: 1: tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl (hash: kfy/Eni/8Hh7gs6g+b35c+dxah24j7VWW9nEIYvbRcw=) 2: FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (hash: SCTf0mwZLUHqFVPegVRVJr7Eh8lVpCyL1GKCV+U6N7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Validity Not Before: Aug 23 02:03:14 2025 GMT Not After : Aug 30 02:03:14 2025 GMT Subject: CN=68a92162-d93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:ad:2d:cf:af:57:95:98:73:4f:20:92:b2: 3e:d7:a2:81:15:1c:19:67:df:a7:d6:9d:39:8d:33: f3:c4:4f:d4:8f:28:e2:e9:ac:30:59:b8:f1:1c:f5: 9e:e6:57:3f:ea:d0:14:3b:16:0b:c4:b1:1b:53:9d: 9a:12:70:53:94:6b:e9:c6:4f:f3:01:11:62:c4:12: 70:26:50:bb:78:f5:24:66:53:d4:c3:1c:7f:a4:5a: f7:a0:49:f9:88:7f:fd:24:74:d2:53:10:b3:c8:df: 6d:3f:d4:80:30:6b:c1:1b:3e:bd:8f:18:1c:ba:94: 09:71:7e:07:5e:bd:91:58:04:d8:a0:0e:12:8c:91: 3e:7f:a2:db:66:22:a8:75:25:70:f8:28:3c:6b:dc: 08:46:65:ee:3e:cc:83:8e:b6:7e:67:d2:9f:6e:74: ac:ae:d1:dc:e4:38:d3:b3:5b:63:fd:21:8a:9d:57: af:f6:e1:fd:1a:8d:ac:bc:a6:3c:03:cd:30:c9:d3: 97:a2:a1:04:bb:98:37:b6:e5:42:00:e1:37:02:ca: c4:db:b7:0a:5e:bf:26:a1:a1:53:9c:a9:16:a9:ff: 4d:f4:8c:4d:4d:bc:f8:11:1e:a6:bf:92:64:1a:f2: a7:15:69:80:7b:9c:23:05:1d:fe:e4:94:26:1f:76: 80:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5C:58:A0:EC:43:33:69:54:52:FF:3C:37:25:3A:35:C7:FB:08:12 X509v3 Authority Key Identifier: keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:31:84:ed:32:82:93:e6:5a:90:f7:7d:f6:d3:0e:a9:55:f9: d3:71:61:c3:11:14:4a:8d:32:f6:ba:99:1a:be:c6:13:8f:22: 8b:e4:d7:a2:9c:88:80:2a:97:a6:05:0d:4e:24:77:2a:89:a5: fb:e2:fb:98:88:4d:23:0b:83:46:ac:0b:45:6f:79:de:4d:e8: be:bb:b8:00:c9:85:e8:ea:2b:92:b1:4e:0e:ca:e8:eb:42:68: f8:fd:94:d7:62:a9:6b:e9:f2:15:e2:b0:11:fd:b4:43:96:6d: 15:32:4c:e2:17:f1:85:97:92:e8:e3:bd:3d:75:93:be:3c:30: d9:4a:a1:99:62:fe:72:74:a6:dd:98:7c:81:b1:5e:1e:34:58: 3f:1d:71:a8:4d:15:6d:bd:be:df:24:78:f9:45:77:dd:61:6b: 3e:b1:fc:3a:12:a7:2e:e4:0d:78:39:f6:8e:ec:79:f1:90:06: 32:c8:f4:59:c2:e9:72:fc:8c:0e:9b:6d:46:00:b3:b2:86:db: d2:a4:22:e0:65:9f:e5:7e:86:e7:93:1e:59:da:0b:20:4b:62: e1:01:2c:17:04:12:4f:12:df:cd:c3:45:a1:34:eb:9a:cb:17: 3a:fa:9a:fd:64:dd:89:8f:a3:3a:d5:38:48:c7:5b:6f:f8:61: 9b:65:66:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKEI0OENCMTgwODI2MkI4MDk5Qjg3MjcyQTU3NkZGRURD MTlBMzk2QkQwHhcNMjUwODIzMDIwMzE0WhcNMjUwODMwMDIwMzE0WjAYMRYwFAYD VQQDEw02OGE5MjE2Mi1kOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3GtLc+vV5WYc08gkrI+16KBFRwZZ9+n1p05jTPzxE/Ujyji6awwWbjxHPWe 5lc/6tAUOxYLxLEbU52aEnBTlGvpxk/zARFixBJwJlC7ePUkZlPUwxx/pFr3oEn5 iH/9JHTSUxCzyN9tP9SAMGvBGz69jxgcupQJcX4HXr2RWATYoA4SjJE+f6LbZiKo dSVw+Cg8a9wIRmXuPsyDjrZ+Z9KfbnSsrtHc5DjTs1tj/SGKnVev9uH9Go2svKY8 A80wydOXoqEEu5g3tuVCAOE3AsrE27cKXr8moaFTnKkWqf9N9IxNTbz4ER6mv5Jk GvKnFWmAe5wjBR3+5JQmH3aAVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBcWKDs QzNpVFL/PDclOjXH+wgSMB8GA1UdIwQYMBaAFLSMsYCCYrgJm4cnKldv/twZo5a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi90SXl4Z0lKaXVBbWJoeWNxVjJfLTNCbWps cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJeXhnSUppdUFtYmh5Y3FWMl8tM0JtamxyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi90SXl4Z0lKaXVB bWJoeWNxVjJfLTNCbWpscjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbMYTtMoKT5lqQ93320w6pVfnTcWHDERRKjTL2upkavsYTjyKL5Nei nIiAKpemBQ1OJHcqiaX74vuYiE0jC4NGrAtFb3neTei+u7gAyYXo6iuSsU4Oyujr Qmj4/ZTXYqlr6fIV4rAR/bRDlm0VMkziF/GFl5Lo4709dZO+PDDZSqGZYv5ydKbd mHyBsV4eNFg/HXGoTRVtvb7fJHj5RXfdYWs+sfw6Eqcu5A14OfaO7HnxkAYyyPRZ wuly/IwOm21GALOyhtvSpCLgZZ/lfobnkx5Z2gsgS2LhASwXBBJPEt/Nw0WhNOua yxc6+pr9ZN2Jj6M61ThIx1tv+GGbZWYY -----END CERTIFICATE-----Generated at Sun Aug 24 03:16:10 2025 by rpki-client